2024-01-29 14:44:23
WPScan
PUBLISHED
The Page Builder: Pagelayer WordPress plugin before 1.8.0 doesnt prevent attackers with administrator privileges from inserting malicious JavaScript inside a posts header or footer code, even when unfiltered_html is disallowed, such as in multi-site WordPress configurations.